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Docket No.: 66729/P032US/10614704 

(PATENT) 

IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Patent Application oft 
Roy Schoenberg 

Application No.: 10/726,423 Confinnation No.: 5827 

Filed: December 3. 2008 Art Unit: 3686 

For: BRIDGED PATIENT/PROVIDER CENTRIC Examiner: S. Rangrq 
METHOD AND SYSTEM 

PROPOSED Amendments to the claims for discussion 
at the April 28, 2009 Examiner Interview. 

1. (Cuiiently Amended) A key organization method comprising: 

receivin g, bv a kev organization system, a first access key that grants^ 
to a particiilar medical service provider, a patient-defined level of access to a 
first set of medical records; 

receivin g, bv said kev nTp;a^i;7Ati on system, a second access key that 
grants , to said particular medical service provider, a patient-defined level of 
access to a second set of medical records; a»d 

storing the first and second access keys in a centralized key repository 
that is communicativeiv accessible bv said kev organization system; and 

associating, bv said key organization svstem. said first and second 
access kevs with said particular medical service provider. 

2- (Original) The method of claim 1 wherein the first access key 
is generated by a fijst patient, and the first set of medical records concern the 
first:patient 
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3. (Origixial) The method of claim 1 wherein the second access 
key is generated by a second patient, and the second set of medical records 
concern the second patient 

4. (Cuirently Amended) The method of claim [[1]] 38 further 
comprising controlling, bv said kev organization syste m, said particular 
medical provider's access to accooGing through a client oomputor connect e d t ^e 
g diGtributed computing n e twor jg? the first set of medical records by allowing 
said particular medical service provider to select said first patient fr om a lis^ of 
patients associated with said particular medical service provider uoing th e firs t 
access key . 

5. (Currently Amended) The method of claim 4 flcrfher 
comprising accessin g, through the client computer connect e d to tho digtrib ate^ 
computine ncts^^ork, the second set of medical records using the aecopd nooooa 
kev organization system . 

6. (Caned) 

7. (Original) The method of claim 1 further comprising storing 
the first and second medical records on a c^lralized medical record 
r^^itory. 

S. (Original) The method ofclaim 7 wherein the centralized 
medical record repository and centralized key repository reside on and are 
executed by a remote server connected to a distributed computing n^oik. 

9. (Original) Themediodof claim 8 wherein: 

the remote server is a web server; and 

the distributed computing network is the Internet 
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10. (Original) The method of claim 1 wherein the first set of 
medical records is a multi-portion medical record and the first access key 
provides access to one or more poitions of the first set of medical records. 

1 1 . (Original) The method of claim 1 wherein the second set of 
medical records is a multi-portion medical record and the second access key 
provides access to one or more portions of the second set of medical records, 

12. (Currently Amended) A key distribution method comprising: 
receiving, bv the key organizatjon system from a first patient using a 

client: computer, a first access key that grants , to a particular provider, a 
patient-defined level of access to a first set of medical records; 

receiving, bv the key organization system from a second patient using 
a second client comnuter, a second access key that p-ants . to said particular 
proyider. a patient-defined level of access to a second set of medical records; 
and 

associating^ bv said ke y nryxaniyji tion svstem> said first and second 
access kevs to said particular provide: 

stoiin p;^ ]3y said key nr^j^nt^n tjon svstem, the first and second access 
keys and said association in a centralized key repositoryiand 

receiving, bv said kev organization system, a request from said 
particular medical service provider to access said first or second set of medical 
reoords and> responsive to said request controlling access to said requested set 
of medical records using said first or second access kev . 

13. (Currently Amended) The method of claim 12 ftirther 
comprising accessi ng, bv said particular provider, the first set of medical 
records using the Sfst-aeeess key flTTif^^^ilt iou system. 

14. (Currenfly Amended) The method of claim 12 fiirther 
comprising accessi ng, bv said particular provider, the second set of medical 
records using the second acc ess key ff^gftni^fiti on system . 
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15. (Original) The method of claim 12 further comprising storing 
the first and second medical records on a cttitralized medical record 
r^ository. 

1 6. (Currently Amended) The method of daim 1 5 wherein the 
centralized medical record repository and centralized key repository reside on 
and are accessible through said key organization sv8t<m Gjcocutod by a r emote 
fi^ve? connected to a distributed computing network. 

1 7 . (Original) The method of claim 1 2 wherein the first set of 
medical records is a multi-portion medical record and the first access key 
provides access to one or more portions of the first set of medical records. 

18. (Original) The method of claim 12 wherein the second set. of 
medical records is a multi-portion medical record and the second access key 
provides access to one or more portions of the second set of medical records. 
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19. (Cuflreatly Ajnended) A key organization method comprising: 
maintaining, on a remote server, a centralized key repository and a 
centraliized medical record repository; aa^ 

stormg a plurality of natient first Dct of medical r e CQrdo rmd a gecond 
set^inedical records on the centralized medical record repository, wherein 
said plnralitv of patient medical records comprises at le ast of a first set of 
medical rer ^^g f>nntaining ^edic al infonnatio ^ pftrtamtnp a first patient and a 
second set of medical records co ^^^iriinpr medical infoi mation pertaining a 
second patient: and 

storing, in said centralized kev repository, a plura lity of provider- 
associated, patient-generated access keys, wherein each one of said access 
keys corresponds to its respective set of medical records, wherein said remote 
server, responsive to a request received from a provider to acce ss one of said 
patient medical records, controls access bv said provider to said medical 
records using said patient-generated access key that is associated with said 
recfucsting provider which corresponds to said requested one of sai d medical 
records, 

20. (Currently Amended) The method of claim 1 9 fbrdier 
comprising: 

receiving from [[a]] said first paticat, a first access ke v. of said 
plurality pf access kevs. that grants to said provider a patient-defined level of 
access to the first set of medical records; and 

receiving, fiom [[a]] said second pati^t, a second access key ^f said 
plurahtv of access kevs, tibat grants to said provider a pattent-defined level of 
access to the second set of medical reooids. 
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21, (Currently Amended) The method of claim 20 further 
comprising itrrriinc. Vv r*-^^ W nrp;^n{y.atiQn system, the first and second 
access keys in the centralized key repository;.and 

retrieving^ bv said kev orga niyatinn system, one of said first and 
second access kevs from the centralized kev reDOs itnrv. wherein the retrieved 
access-key is used bv said centralized kev repository to giv e said provider 
access to the set of medical records associated with said retrieved access kev - 

22. (Cuirently Amended) The method of claim 1 9 further 
comprising access ing, bv said kev nrpjaniyAti on system, the first set of medical 
records using the first access key. 

23 . (Currently Amended) The method of claim 1 9 further 
comprising access ing, bv said key nrppmiaat jon system, the second set of 
medical records using the second access key. 

24. (Currently Amended) The method of claim 19 wherein the 
centralized medical record repository and centralized key repository reside on 
and aro oxocut e d by a remote server connected to a distributed compiiting 
network and are co Tnmnni>j^ tivelv coupled to said kev Qr9 ;?mt7;fltion system. 

25. (Original) The method of claim 24 wherein: 
tbe remote server is a web server; and 

: the distributed computing networic is the Internet. 

26. (Original) The method of daim 19 wherein the first set of 
medical records is a multi-portion medical record and die first access key 
provides access to one or more portions of the first set of medical records. 

27. (Original) Tbe method of claim 1 9 wherein the second set of 
medlical records is a multi-portion medical record and the second access key 
provides access to one or more portions of the second set of medical records. 
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28. (Qirrently Ammded) A key organization system cornprising: 
a server system including a computer processor and associated 
manoiy, the server system having a centralized key repository and a 
centralized medical record repository; 

wherein the server system is configured to: 

store a fii"st set of medical records and a second set of 
medical records on the centralized medical record repository; 

receive a first access key associated with a oarticalar 
provider that grants to said particular provider a patient-defined 
level of access to the first set of medical records; 

receive a second access key associated with said 
particular provider that grants to said particular provider a 
padent-defined level of access to the second set of medical 
records; and 

store the first access key and the second access key.on 
the centralized key repositor y: and 
a key organization system, wherein the kev organization svstem is 
confijgured to control access bv said particular provider to said first and second 
set of medical records using said first and second access keys, respectiivelv . 

29. (Currently Amended) The system of claim 28 further 
comprising a cli^t syst^ induding a computer processor and associated 
memory, the client system being configured to: 

provide said particular medical service provider with access ttie first 
set of medical records bv requesting that sai d key paniT ation svstem use 
yrAng the first access key; and provide said particular medical service provider 
witli access the second set of medical records bv requesting that said kev 
prganization system use mm^ the second access key. 

30. (Original) Thesystemof claim 29 wherein the server system 
and the client system are coupled via a distributed computing network. 
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31. (Original) The systeniofdaim 30 wherein the distributed 
compiitiiig network is the Internet. 

32. (Original) The system of claim 28 wherein the first set of 
medical records is a multi-portion medical record and the first access key 
provides access to one or more portions of the first set .of medical records. 

33. (Original) The method of claim 28 wherein the second set of 
medical records is a multi-portion medical record and the second access key 
provides access to one or more portions of the second set of medical records. 

34. (Currently Amended) A computer program product residing on 
a computer readable medium having a plurality of instructions stored thereon 
which, when executed by the processor, cause that processor to: 

receive a first access ke v. fi-om a patient at a kev oreaniz ation system, 
that grants to a first nrovider a patient-defined level of access to a first set of 
medical records; 

receive a second access ke y^ Gxym said patient at a kev organization 
system, that grants to a second provider a patient*defined level of access to a 
second set of medical records; and 

store the first and second access keys in a centralized key repository. 
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35. (Currently Amended) A oomimter program product residing on 
a computer readable medium having a plurality of instructions stored thereon 
which, when executed by the processor, cause that processor to: 

receivg^aagcsfflit, frnm n fif^ p^^^^^t ^ v^^y ^rpani^ation system, a 
first access key associated with a first provider that grants to said first provider 
a patient-defined level of access to a first set of medical records; 

. receive teasfimit from a second said patient at said kev organization 
system, a second access key that grants to said seco nd provider a patient- 
defined level of access to a second set of medical records; aad 

store the first and second access keys in a centi-alized key repository 
receive a request from said first provider to access said first set of 
medical records: and 

retrieve, responsive to said request, said first access key to provide said 
first provider with access to said first set of medical records . 
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36. (Currently Amended) A computer program product residing on 
a computer readable medium that is coTmnunicativelv c oupled to a server 
having a plurality of instructions stored thereon which, when executed by ^ 
a processor of the server cause the processor to: 

m aintain, on a remote poivor, a oontroliz o d koy repooitory and a 
G ontroliisod medical rooord ropocitotj i ^; and 

store a plurality of natient associated first act of modical rcGOrdo and a 
socond pet of medical records on *e a centralized medical record repository, 
wherein said plurality of patient associated medical records com prises at least 
of a first set of medical records associated with a first patien t and a se cond set 
of medical records associated with a second ijatient; 

store a plurality of providcf -associated access keys on 6a^4 a 
centralized kev repository, wherein a first access keY> of said plur^tv access 
keys, grants a natie nt-Hfefi-ne d level of access to the first set of medical records 
and a second access kev. of said t>hiralitv of access keys, grants a patient- 
defined level of access to the second set of medical records: and 

control a requesting provi der's access to said plurality of -patient 
associated medical records using said first or second access key. 

37. (New) Hie method of claim 1 fiirther comprising: 

granting said particular medical service provider secure access to said 
key organization system^ wherein said access allows said particular medical 
service provider to select a patient fitmi a group of patients associated with 
said particular medical service provider. 

38. (New) The method of claim 37 wherdn said secure access is 
granted after said particular medical service provide passes a security test 
issued by said key organization system. 
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3 9 . (New) The method of claim 37 further comprising: 

receiving, by said key organization system, said selection, wherein said 
selection is a request to access said first set of medical records; 

retrieving, by said key organization system in response to said 
selection, said first access key; and 

using> by said key organization system, said first access key to control 
said particular medical services provider's access to said first medical records. 

40. (New) The method of daim 4 wherdn accessing the first set of 
medical records does not require said particular medical service provider to 
pass a second security test 
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